Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: 4Fdm0kE8SKVfH20EMLpPhgBmMAG5a/5n0BOmhs5QoaU=
Subject key identifier: 84:1C:2E:07:E6:3A:7C:F2:21:87:E4:E5:3D:D8:E5:00:D2:3B:CC:20
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019A4DE179950DEC8F3A8B734904B8B95743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:13 +0000
Manifest this update: Tue 04 Nov 2025 08:00:13 +0000
Manifest next update: Wed 05 Nov 2025 08:00:13 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: yCqNrsJYTsCXYUtxRiwM9gTWucfHbZOZ+dUVNj9S/hk=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:79:95:0d:ec:8f:3a:8b:73:49:04:b8:b9:57:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Nov 4 08:00:13 2025 GMT
Not After : Nov 5 08:00:13 2025 GMT
Subject: CN=841c2e07e63a7cf22187e4e53dd8e500d23bcc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:75:97:fe:5a:0d:ef:39:69:b5:32:93:22:
f4:73:53:0d:bd:b8:1c:e5:88:24:95:1f:be:d8:c1:
f1:08:7c:dd:00:9b:a5:a4:bd:b9:b1:cb:df:9f:19:
a2:d6:2c:54:49:cf:58:f1:7d:0d:28:20:74:f4:12:
40:65:f5:7a:c1:64:b8:9f:4b:fe:29:08:3e:1e:4b:
03:d0:65:57:4d:58:d7:c6:6b:b1:da:f4:b9:45:91:
c0:e3:80:89:04:8d:85:ba:b4:c5:92:ae:8a:6d:22:
d2:86:29:e2:fc:c6:e3:81:51:3e:96:d0:65:97:38:
a9:79:10:74:f9:12:d5:de:26:a5:8f:ee:ac:ef:19:
02:56:8d:35:57:b2:8f:63:0e:ec:8b:05:93:1e:a6:
56:bc:3b:4d:9b:47:f5:ff:77:d6:fc:59:a9:fb:d8:
db:0e:fc:55:f8:1c:c4:98:35:95:e8:72:78:c7:95:
62:9b:33:f2:4c:89:b1:eb:6e:f9:b6:a0:ec:d1:bf:
5c:a7:29:f7:d7:b0:54:36:98:4b:51:b1:66:b3:1d:
1c:3d:42:c2:67:9a:98:c9:0f:b1:be:0a:8a:ca:5f:
f1:7c:a6:f3:00:64:99:5b:da:1f:08:ec:a6:33:aa:
7b:f1:d5:f8:21:76:e5:e8:17:4f:e9:c7:fa:f2:4d:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:2E:07:E6:3A:7C:F2:21:87:E4:E5:3D:D8:E5:00:D2:3B:CC:20
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:14:ba:34:01:d4:35:be:f2:a9:05:e8:00:dc:7b:fa:1c:dd:
26:f9:ea:61:93:2a:9a:da:e3:80:ce:b6:38:15:9e:84:6e:9a:
2f:c6:03:12:65:33:d1:68:18:74:47:30:6f:91:0b:32:33:cc:
4d:2c:b2:12:74:48:73:c9:71:da:8f:82:8e:dd:fa:8d:51:f0:
6f:b2:68:f3:53:f8:6b:62:90:6d:b4:93:b0:6c:17:73:62:b2:
3a:ee:34:5d:a2:35:4b:19:ad:9f:e9:6c:4d:fe:16:1d:27:9a:
0f:40:55:57:e3:c3:ab:b6:41:98:54:6f:3d:a3:5e:9f:06:72:
fa:a9:c1:3a:c0:d6:0f:58:21:c2:ad:8e:9e:23:64:bf:15:84:
a3:a4:b9:56:3f:39:ee:f0:fe:18:9b:42:40:71:c5:c1:9b:53:
c2:d0:45:38:ec:85:c7:c1:d8:21:03:9e:98:38:de:6e:64:58:
46:44:33:23:73:73:0b:9d:37:eb:10:ed:22:87:bd:e7:51:9a:
2c:eb:18:f6:c3:36:ad:55:c2:73:31:1e:3d:1f:a7:c1:63:84:
22:72:a2:4e:fe:14:56:04:8f:71:49:8f:24:fe:08:94:c9:0d:
d7:a9:bc:49:b0:bf:0b:b5:6c:1e:f3:e3:ca:57:05:2b:29:af:
37:82:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:02 2025 by rpki-client